Empower Tip: ALCOA++

In this tip, we will explore how to configure Empower to adhere to ALCOA++ principles. Let’s begin with Attributable. (Note: I recommend reading Tip 411 before reading this tip)

Let’s see how it’s done!

Attributable means that it is attributable to the person acquiring the data. Things to consider:

Do not share User accounts

Enforce unique User Account names

Set password expiration and number of characters for password

Lock User account after repeated failed attempts to login

The Empower Administrator MUST NOT know a User’s password. There needs to be cultural/behavioral controls in place:

Users choose passwords that are not obvious

Users keep passwords secret and secure

Use the Empower applications time out to require re-authentication after a period of inactivity such as:

Coffee breaks

Lunch breaks

Gone to the laboratory to prepare samples, prepare the instrument and so forth

Cultural/Behavioral Controls: Users should choose to LOCK running Empower applications when leaving the client.

It’s that easy!

Note: These settings can be made in System Policies and User Properties, both in Configuration Manager.